Vulners
Lucene search
Apple iOS 10.3.1 - Kernel Exploit
| Reporter | Title | Published | Views | Family All 85 |
|---|---|---|---|---|
 | Apple iOS < 10.3.2 Multiple Vulnerabilities | 17 May 201700:00 | – | nessus |
| Apple TV < 10.2.1 Multiple Vulnerabilities | 18 May 201700:00 | – | nessus |
| Mac OS X 10.x < 10.12.5 Multiple Vulnerabilities | 17 May 201700:00 | – | nessus |
| Apple TV < 10.2.1 Multiple Vulnerabilities | 17 May 201700:00 | – | nessus |
| Apple iOS < 10.3.2 Multiple Vulnerabilities | 18 May 201700:00 | – | nessus |
| Mac OS X Multiple Vulnerabilities (Security Update 2017-002) | 18 May 201700:00 | – | nessus |
| macOS 10.12.x < 10.12.5 Multiple Vulnerabilities | 18 May 201700:00 | – | nessus |
 | About the security content of iOS 10.3.2 | 15 May 201700:00 | – | apple |
| About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite | 15 May 201700:00 | – | apple |
| About the security content of tvOS 10.2.1 | 15 May 201700:00 | – | apple |
10
Sources:
https://github.com/doadam/ziVA
https://blog.zimperium.com/ziva-video-audio-ios-kernel-exploit/
ziVA
An iOS kernel exploit designated to work on all 64-bit iOS devices <= 10.3.1
More general information
https://blog.zimperium.com/zimperium-zlabs-ios-security-advisories/
https://blog.zimperium.com/ziva-video-audio-ios-kernel-exploit/
Offsets modifications for other iOS devices
Like a lot (if not most) of the iOS kernel exploits, this also requires offsets for each iOS device and version. Those will be posted in the close future (when I get more time) but should be acquired from AppleAVEDriver (you can get a hint on the offsets from the comments above them).
Sandbox escape
Like mentioned, AppleAVEDriver direct access requires sandbox escape (either mediaserverd sandbox context or no sandbox at all). Fortunately, Sandbox escape exploits have been released by P0, which means this can be used to completely compromise a kernel, and a step towards a full jailbreak.
Is it a Jailbreak?
This is a crucial part in a Jailbreak chain, but this never aimed to become a Jailbreak.
Is this going to be a jailbreak?
Maybe, if someone wants to work on that
# 0day.today [2018-04-12] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
27 Aug 2017 00:00Current
7.1High risk
Vulners AI Score7.1
EPSS0.02343